On Thu, Nov 13, 2014 at 4:13 AM, <[email protected]> wrote: > hi,all > > my ossec.conf like this > > > <reports> > <level>8</level> > <title>Soc Daily Report</title> > <showlogs>yes</showlogs> > <email_to>[email protected]</email_to> > </reports> > > > > and ossec.log > > > 2014/11/10 15:00:55 ossec-testrule: INFO: Reading local decoder file. > 2014/11/10 15:00:55 ossec-testrule: INFO: Started (pid: 8747). > 2014/11/11 00:00:38 ossec-monitord: INFO: Starting daily reporting for 'Soc > Daily Report' > 2014/11/11 11:01:43 rootcheck: INFO: Starting rootcheck scan. > 2014/11/11 11:17:58 rootcheck: INFO: Ending rootcheck scan. > 2014/11/11 12:42:58 ossec-syscheckd: INFO: Starting syscheck scan. > 2014/11/11 12:50:25 ossec-syscheckd: INFO: Ending syscheck scan. > > > > see ossec-monitord starting,but no email send me.. > > i see ossec/logs/ some .report... file and nothing in file.. > > > so how can i do? >
If you run the report manually, do you get back any information? > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
